PRIVACY POLICY
Information on Privacy Policy at the Velana Living Online Store
1. Introduction
Dear Customer,
You are now viewing the Information on Privacy Policy within the Velana Living online store (hereinafter: IOOPVL).
The data controller is KOMPAS SHOP d.d., Šmartinska cesta 52, 1000 Ljubljana, Registration Number: 5004560000, VAT Number: SI 26884836, according to the EU General Privacy Policy Regulation and applicable Slovenian privacy policy laws. Whenever personal data is provided to Velana Living during consent requests, inquiries, online store registrations, or purchases, it is always provided to the controller KOMPAS SHOP d.d.
In addition to IOOPVL, we kindly ask you to review the terms and conditions of the Velana Living online store, which form part of the contractual relationship when registering or making purchases in the online store and are accepted upon order submission, as well as the Cookie Policy, which details how we collect and process your personal data using cookies and for what purposes.
2. Personal Data
Personal data refers to any information related to an individual that identifies or makes them identifiable. An individual is identifiable when they can be directly or indirectly identified, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or by one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
3. Purposes of Privacy Policy, Data and Legal Bases
The controller collects and processes the following personal data for the purposes defined in this IOOPVL:
- For online store registration (legal basis from point b) of the first paragraph of Article 6 of the General Privacy Policy Regulation):
Name, surname, address, email, phone number, delivery address, username, and password.
- For purchases in the online store (legal basis from point b) of the first paragraph of Article 6 of the General Privacy Policy Regulation):
Name, surname, date of birth, address, email, phone number, delivery address (if different from residence address), billing address, selected delivery method data (to address or in-store pickup), payment method data (credit card information, payment on delivery, or via PayPal), purchased items data (item description, code, price), purchase time data (day, time), and invoice data (invoice details).
- For inquiries in the online store and placing items in the cart, we store data on selected (not yet purchased) items in the cart for registered online store users (legal basis from point b) of the first paragraph of Article 6 of the General Privacy Policy Regulation):
Item data (description, code, price) and time data of item placement in the cart (date, time) linked to registered user data of the online store.
- For registered users of the online store, we store data on past purchases (legal basis from point b) of the first paragraph of Article 6 of the General Privacy Policy Regulation):
Name and surname, address, email, phone number, delivery address, username, and password, purchase time (date), purchased items (description, code, price) and delivery data (delivery date).
- For subscription to receive notifications about offers and new products – receiving newsletters (legal basis from point a) of the first paragraph of Article 6 of the General Privacy Policy Regulation):
Name and surname, email.
- When contacting us with various inquiries (legal basis from point a) of the first paragraph of Article 6 of the General Privacy Policy Regulation when posing a question and from point b) of the first paragraph of Article 6 of the General Privacy Policy Regulation when sending an inquiry):
Name and surname, phone number, email, and message content.
3.2. Retention Periods
You can purchase in the Velana Living online store as a registered user or a guest. A registered user enters into a contractual relationship with the controller after registration by accepting the general terms of the Velana Living online store and enjoying the benefits as per the general terms. A guest makes a purchase by accepting the General Terms of the Velana Living online store and providing personal data as listed in point 2 above.
Data provided to the controller upon accepting the general terms of the Velana Living online store (legal basis from point b of the first paragraph of Article 6 of the General Privacy Policy Regulation) are processed for fulfilling the rights and obligations of contractual parties as per the valid general terms and are retained within the statute of limitations under general contract law (typically 5 years from transaction completion).
Data provided to the controller based on consent (point a of the first paragraph of Article 6 of the General Privacy Policy Regulation) are generally retained until consent is withdrawn.
4. Other Purposes as Specified by Regulations
The controller processes personal data to comply with legal obligations (point c of the first paragraph of Article 6 of the General Privacy Policy Regulation):
For issuing invoices (VAT Act) based on purchases and handling complaints under the valid Consumer Privacy PolicyAct, responding in potential oversight procedures (the necessary personal data as specified by law or required for responding to requests from authorities or individuals).
Based on prevailing legitimate interest (point f of the first paragraph of Article 6 of the General Privacy Policy Regulation), the controller processes the personal data of online store visitors or customers for responding to other legal claims.
Based on and under conditions from the provisions of the Electronic Communications Act (ZEKom-2 or point e) of the first paragraph of Article 6 of the General Privacy Policy Regulation), the controller uses customers' email addresses to inform them through email about promotions, discounts, and other benefits. Customers can opt-out of such email use upon providing the email address to the controller or at any time later (including with every received electronic notification).
5. Data Processing with Cookies
The controller processes personal data of online store visitors also using cookies. Cookies are small files loaded onto your computer via a web browser upon entering the website. Cookies help the controller improve the website and visitor experience. For details on cookies, please read our Cookie Policy.
Personal data processed by the controller for the purposes as mentioned earlier and within permissible retention periods will be stored in an electronic or physical personal data record (depending on the form of the collected personal data), which are appropriately technically secured, and accessible only to authorized persons of the controller. After the retention period, the controller effectively and permanently deletes or anonymizes personal data so that they can no longer be linked to an individual.
6. Processing with Third Parties
Personal data processing is also conducted with contracted processors (e.g., for product delivery, external IT support, and external accounting services), with whom the controller has entered into an appropriate written agreement on personal data processing in line with the lawful purposes defined in IOOPVL. The controller stores personal data within the EU and does not transfer them to third countries.
7. Rights of Individuals
Under applicable regulations, individuals have the right to information, access to personal data, correction, deletion, processing restriction, data portability, objection, non-automated decision-making, complaint to the supervisory authority, and withdrawal of consent to data processing.
Individuals must adequately identify themselves in the application in which they exercise their rights and clearly define their request, sending it to the email address: dpo@kompas-shop.si.
8. Privacy Policy Officer
The Privacy Policy Officer is available at dpo@kompas-shop.si, where individuals can also address additional questions related to personal data processing.
9. Right to Lodge a Complaint
If, after contacting the controller, an individual still believes that their privacy policy rights are violated, they have the right to complain to the national supervisory authority: Republic of Slovenia, Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, phone: +386 1 230 97 30, email: gp.ip@ip-rs.si.
10. Validity and Amendment of this Information
The information on personal data processing is valid from 01.12.2023, with amendments on 01.07.2024, and is accessible via the link: www.velanaliving.si, and may change in line with legislative amendments and best practices.